Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

NEAS.0f461...40.exe

windows7-x64

10

NEAS.0f461...40.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.0f46146686ea4417b0504acf58b4d240.exe

  • Size

    199KB

  • Sample

    231113-dbne3sgd96

  • MD5

    0f46146686ea4417b0504acf58b4d240

  • SHA1

    743922508eb5c3825b2705bf5325cb89ad102350

  • SHA256

    5e8542b417c2fef167c75cba8dfa2353953efa959ee8499c953e3190a2eceb20

  • SHA512

    64fe35e1ad46b5bbd58128bf93ab2f2ca54b3dbd5f7b22a56e4720789514ae2923aac1e5673ce0c7a5ed22087bd450f33f2d38e043d18fbe08a1de9f8a742051

  • SSDEEP

    6144:2SSt2r3KSZSCZj81+jq4peBK034YOmFz1h:yGZSCG1+jheBbOmFxh

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.0f46146686ea4417b0504acf58b4d240.exe

    • Size

      199KB

    • MD5

      0f46146686ea4417b0504acf58b4d240

    • SHA1

      743922508eb5c3825b2705bf5325cb89ad102350

    • SHA256

      5e8542b417c2fef167c75cba8dfa2353953efa959ee8499c953e3190a2eceb20

    • SHA512

      64fe35e1ad46b5bbd58128bf93ab2f2ca54b3dbd5f7b22a56e4720789514ae2923aac1e5673ce0c7a5ed22087bd450f33f2d38e043d18fbe08a1de9f8a742051

    • SSDEEP

      6144:2SSt2r3KSZSCZj81+jq4peBK034YOmFz1h:yGZSCG1+jheBbOmFxh

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks